We have had an issue with users using LDAP authentication not being able to log in in with single or double quotes. It appears that the quotes arrive to the AuthenticateUser function escaped. Our solution is to replace the escaped quotes :
//Single and Double quotes come through excaped. Fix with string replace.
$password = str_replace('\"', '"', str_replace("\'","'",$password));
at line 41 of or-authenticate.php.
Not sure it is the best solution. Is there a better way.
Log in to post a comment.